DOM-based Cross-Site Scripting Vulnerability in Adobe Experience Manager

CVE-2025-64563

What is CVE-2025-64563?

Adobe Experience Manager versions 6.5.23 and prior are susceptible to a DOM-based Cross-Site Scripting (XSS) vulnerability. This flaw allows attackers with low privileges to inject and execute malicious scripts within the victim's browser environment. Successful exploitation necessitates user interaction, such as clicking on a specially crafted link or engaging with a compromised web page, which could lead to unauthorized actions or data theft. Users are urged to remain vigilant and apply necessary patches to safeguard against this risk.

References